Security Scan Report: vicibici.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 3 countries across 19 domains to perform 220 HTTP transactions. The main domain is vicibici.com and was registered 5 years ago.

Submitted URL: https://vicibici.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate-looking bicycle shop whose pages are compromised with an IClickFix/EtherHiding ClickFix loader (YARA kit match, 7 critical IDS malware alerts, primary domain flagged as a malware loader). Visitors may be served ClickFix malware.

Risk Factors (4)
Known malicious ClickFix/EtherHiding kit injected into the site (analyst-vetted kit roster, CRITICAL phishing category)
CRITICAL IDS malware alerts for ClickFix domains and EtherHiding exfiltration
Primary scanned domain flagged as malware loader in threat intelligence
Third-party malware-domain (zvh4.com) contacted in TLS SNI / DNS queries
Domain age information unavailable

Details

Page Title

VICIBICI - Tienda de Bicicletas Online - La mayor selección en stock

Scan Type

public

Domain Name Analysis

Domain 'vicibici.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'vicibici' spans 8 characters containing four vowels alongside 4 consonants. It segments into three words: vici, bic, i. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vicibici.com

Page Load Overview

8.93s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:8,719 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software63% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
58%
news/blog
35%
corporate
35%
e-commerce
30%

Detected Features

Search
Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24165.232.65.124Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
774.125.29.95Google · CDNUnited States
AS15169Google LLC
7142.251.155.119Google · CDNUnited States
AS15169Google LLC
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
73.160.150.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.13.97Google · CDNUnited States
AS15169Google LLC
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
718.66.122.80Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
713.33.50.64Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
7142.251.127.101Google · CDNUnited States
AS15169Google LLC
22029--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180B429A598B405B7444FA3D1E458B7ACF8B69216DBC282E4F5FDC3689BC5CECC223548

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:CFd8Zuhn7UqPoRy5ENbKR8ilNdeYLYQYMbAkP16rJZMVnIDVQDJUq:C8uhvmN9AZnAkP16rJZMVnIk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:532554:CYBiQATAjhQhSCCJrQOCogAgHBSat9WTQiEAiyxgmU6EhgQFaMCTgFIqNARLCMB4xVBj1qEDahBB5YHogBspZ5RAAGoDFEUF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff818181fbfffeff
Perceptual Hash:fa2a96858d5c8793
Difference Hash:2d092933132524c8
Wavelet Hash:a181818181fffcfe
Color Hash:#c387c5

Scan History

Scan history not available

Unable to load historical scan data